Lucene search
+L

1496 matches found

UbuntuCve
UbuntuCve
added 2024/05/29 10:15 a.m.32 views

CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS5.8AI score0.00475EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/29 10:15 a.m.34 views

UBUNTU-CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS5.6AI score0.00475EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/05/29 10:00 a.m.38 views

CVE-2024-28826 Unrestricted upload and download paths in check_sftp

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS8.6AI score0.00475EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/29 10:00 a.m.17 views

CVE-2024-28826 Unrestricted upload and download paths in check_sftp

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS6.6AI score0.00475EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/29 10:00 a.m.60 views

CVE-2024-28826

Summary: CVE-2024-28826 affects Checkmk installations prior to 2.3.0p4, 2.2.0p27, 2.1.0p44, and 2.0.0 (EOL). Root cause: Improper restriction of local upload/download paths in the check_sftp function. Impact: Attackers with sufficient permissions can configure the check to read and write local fi...

8.8CVSS6.4AI score0.00475EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/05/29 10:00 a.m.13 views

CVE-2024-28826 Unrestricted upload and download paths in check_sftp

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS5.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/29 12:00 a.m.9 views

PT-2024-22594

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.3.0p4 Checkmk versions prior to 2.2.0p27 Checkmk versions prior to 2.1.0p44 Checkmk version 2.0.0 Description The issue is related to improper restriction of local upload and download paths in the check sftp...

8.8CVSS5.4AI score0.00475EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/05/29 12:00 a.m.8 views

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from an improperly restricted path for local uploads and downloads in the function checksftp, which allows an attacker to read and write to local files on the Checkmk site server. Affected Products and Versions:Checkmk...

8.8CVSS6AI score0.00475EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/24 12:15 p.m.22 views

CVE-2024-28825

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

9.8CVSS6AI score0.00521EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/24 12:15 p.m.31 views

UBUNTU-CVE-2024-28825

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

9.8CVSS5.8AI score0.00521EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/24 11:25 a.m.28 views

CVE-2024-28825 Brute-force protection ineffective for some login methods

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

5.9CVSS6.2AI score0.00521EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/24 11:25 a.m.90 views

CVE-2024-28825

CVE-2024-28825 affects Checkmk installations where login attempts are not adequately limited. The vulnerability exists in multiple Checkmk branches prior to fixes: 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and (EOL) 2.0.0. Root cause: insufficient restriction on excessive authentication attempts for ce...

9.8CVSS7.2AI score0.00521EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/04/24 11:25 a.m.13 views

CVE-2024-28825 Brute-force protection ineffective for some login methods

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

5.9CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/04/24 11:25 a.m.16 views

CVE-2024-28825 Brute-force protection ineffective for some login methods

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

5.9CVSS7.4AI score0.00521EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/24 12:00 a.m.21 views

PT-2024-22593 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0b5 Checkmk versions prior to 2.2.0p26 Checkmk versions prior to 2.1.0p43 Checkmk version 2.0.0 Description: The issue is related to improper restriction of excessive authentication attempts on some authenticatio...

9.8CVSS7.5AI score0.00521EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/04/24 12:00 a.m.10 views

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.3.0, 2.2.0, 2.1.0, and 2.0.0, which stems from the fact that login attempts via the REST API and basic authentication do not count against the lockout mechanism, and which can be exploited by an attacker to attempt to bru...

9.8CVSS7.1AI score0.00521EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/16 12:15 p.m.25 views

CVE-2024-3367

Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...

6.5CVSS6.5AI score0.00314EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/16 12:15 p.m.9 views

UBUNTU-CVE-2024-3367

Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...

6.5CVSS5.8AI score0.00314EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/04/16 12:15 p.m.32 views

CVE-2024-3367

Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...

6.5CVSS5.8AI score0.00314EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/16 11:59 a.m.26 views

CVE-2024-3367 Argument injection to runmqsc

Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...

6.5CVSS6.6AI score0.00314EPSS
SaveExploits0References1
Rows per page
Query Builder